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IN THE CLAIMS: 



Please cancel claim 20 without prejudice. 

1 1. (Previously Presented) Apparatus for tightly-coupling hardware data encryption func- 

2 tions with software-based protocol decode processing within a pipelined processor of a 

3 programmable processing engine in a network switch, the apparatus comprising: 

4 an encryption execution unit contained within the pipelined processor; 

5 an ALU contained within the pipelined processor; 

6 an instruction decode stage (ID stage), in response to reading an opcode, enables 

7 the encryption execution unit to read data from a memory shared by the ALU and the 

8 encryption execution unit, and for the encryption execution unit to process the data read 

9 from the shared memory; and 

10 a multiplexer to select as an output a result of processing by the encryption exe- 
i i cution unit rather than a result of ALU processing. 
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1 2. (Original) The apparatus of Claim 1 wherein the encryption execution unit is an en- 

2 cryption tightly coupled state machine (TCSM) unit that is selectively invoked within the 

3 pipelined processor. 



1 3. (Previously Presented) The apparatus of Claim 2, further comprising: 

2 native encryption opcodes provided within an instruction set of the pipelined 

3 processor to enable selective access to the encryption TCSM unit by software. 



1 4. (Previously Presented) The apparatus of Claim 3, further comprising: 

2 a plurality of busses internal to the pipelined processor and wherein a hardware 

3 portion of the interface allows the encryption TCSM unit to utilize the internal buses in 

4 response to decode processing of the native encryption opcodes. 
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! 5. (Previously Presented) The apparatus of Claim 4, further comprising: 

2 the pipelined processor is a microcontroller core (TMC) processor having a 

3 multi-stage pipeline architecture that includes an instruction fetch stage, an instruction 

4 decode stage, an execution stage and a memory write-back stage. 



1 6. (Previously Presented) The apparatus of Claim 5, further comprising: 

2 the TMC processor further includes an arithmetic logic unit, at least one internal 

3 register, an instruction fetch and decode unit and the encryption TCSM unit organized as 

4 a data path. 
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1 7. (Previously Presented) The apparatus of Claim 5 wherein the encryption TCSM unit 

2 comprises: 

3 a data encryption standard (DES) functional component cooperatively coupled to 

4 a sub-key generation functional component. 



1 8. (Previously Presented) The apparatus of Claim 7 wherein the DES functional compo- 

2 nent comprises: 

3 state machine hardware used to execute each round of a DES function. 



i 9. (Previously Presented) The apparatus of Claim 7, further comprising: 



2 



3 



the sub-key generation functional component comprises state machine hardware 

that generates a sub-key as needed for each round of a DES function. 
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10. (Previously Presented) A method for tightly-coupling hardware data encryption 
functions with software-based protocol decode processing within a pipelined processor of 
a programmable processing engine in a network switch, the method comprising the steps 
of: 

providing an encryption execution unit within the pipelined processor; 
providing an ALU within the pipelined processor; 

enabling, by an instruction decode stage (ID stage) in response to reading an op- 
code, the encryption execution unit to read data from a memory shared by the ALU and 
the pipelined processor, and for the encryption execution unit to process the data read 
from the memory; and 

selecting as output the result of processing by the encryption execution unit rather 
than selecting results from the ALU. 



1 1 . (Previously Presented) The method of Claim 10, further comprising: 
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2 having native encryption opcodes contained within an instruction set of the pipe- 

3 lined processor; and 

4 issuing the native encryption opcodes directly to the encryption execution unit to 

5 substantially reduce encryption setup latency. 



i 12. (Previously Presented) The method of Claim 11, further comprising: 

2 

3 decoding the native encryption opcodes at the instruction decode stage; and 

4 in response to the step of decoding, invoking the encryption execution unit to per- 

5 form encryption/decryption functions at the execution stage. 



i 13. (Previously Presented) The method of Claim 12, further comprising! 

2 

3 protocol processing of protocols contained in a plaintext stored at the network 

4 switch to determine an appropriate encryption algorithm; 

5 upon determining the appropriate encryption algorithm, immediately starting an 

6 operation to fetch initial keys needed to perform the encryption/decryption functions; and 
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upon fetching the keys, providing the keys to the encryption execution unit within 
the TMC processor. 

14. (Previously Presented) The method of Claim 13vfurther comprising: 

including a plurality of high-performance busses internal to the TMC processor; 

and 

accessing the internal busses to simultaneously load an encryption key and store 
a previous encryption result 

15. (Previously Presented) The method of Claim 12 further comprising the step of, 
wherein the encryption execution unit is an encryption tightly coupled state machine 
(TCSM) unit: 

initializing the encryption TCSM unit in response to execution of a first instruc- 
tion that defines the form of operation to be performed. 

16. (Original) The method of Claim 15 wherein the encryption TCSM unit comprises a 
data encryption standard (DES) functional component cooperatively coupled to a sub-key 
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3 generation functional component and wherein the step of initializing comprises the steps 

4 of: 

5 decoding a first portion of the first instruction to initialize the DES functional 

6 component; and 

7 decoding a second portion of the first instruction to initialize the sub-key genera- 

8 tion functional component. 



1 17. (Original) The method of Claim 16 further comprising the step of: 

2 executing a second instruction having a micro-opcode field containing a native 

3 encryption opcode that specifies loading an initial key from a memory into the sub-key 

4 generation functional component of the encryption TCSM unit. 



1 18. (Previously Presented) The method of Claim 1 7 further comprising the step of: 

2 performing a DES function on a plaintext in response to execution of a third in- 

3 struction having a micro-opcode field containing a native encryption code that specifies 
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loading of the plaintext into the DES functional component of the encryption TCSM unit 
and initiating DES operations; and 

upon completing the DES operations, storing a ciphertext result in an internal 
register coupled to the DES functional component. 



19. (Original) The method of Claim 18 further comprising the step of: 

executing a fourth instruction to store the ciphertext results contained in the inter- 
nal register to a location in the memory. 



20. (Canceled) 



21 . (Previously Presented) A pipelined processor in a network switch, the processor 
comprising: 
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an ALU internal to the processor responsive to a first set of opcodes; 

an encryption execution unit internal to the processor having an encryption tightly 
coupled state machine (TCSM) responsive to a second set of opcodes; 

an instruction decode stage (ID stage) to decode an opcode, the ID stage, in re- 
sponse to an opcode of said second set of opcodes, transferring processing to the encryp- 
tion execution unit; 

a multiplexer to select output from the ALU OR from the encryption execution 

unit. 



22. (Previously Presented) The processor of Claim 21, wherein the processor is a micro- 
controller core (TMC) processor and further comprises: 
an instruction fetch stage; 

an execution stage to execute an instruction decoded by the ID stage; and 

a memory write-back stage to write a result of said execution stage to memory. 



23. (Previously Presented) The processor of Claim 21, further comprises: 
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one or more internal registers; 

a bus operatively connecting the one or more internal registers to both the ALU 
and the encryption execution unit; and 

a multiplexer having inputs from both the ALU and the encryption execution unit, 
the multiplexer outputting a selected input. 



24. (Previously Presented) The processor of Claim 21, wherein the encryption TCSM 
unit comprises: 

a data encryption standard (DES) functional component cooperatively coupled to 
a sub-key generation functional component. 



25. (Previously Presented) The processor of Claim 24, wherein the DES functional 
component comprises: 

a state machine that executes each round of a DES function. 
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26. (Previously Presented) The processor of Claim 24, wherein the sub-key genera- 
tion functional component comprises: 

a state machine that generates a sub-key as needed for each round of a DES func- 
tion. 



27. (Previously Presented) A method for providing encryption functions within a pipe- 
lined processor in a network switch, the method comprising the steps of: 

associating a first set of opcodes with an ALU internal to the processor, the ALU 
performing protocol processing operations; 

associating a second set of opcodes with an encryption execution unit internal to 
the processor, the encryption execution unit performing encryption operations; 

decoding opcodes by an instruction decode stage (ID stage); 

transferring by the ID stage, in response to an opcode from said first set of op- 
codes, processing to the ALU; 

transferring by the ID stage, in response to an opcode from said second set of op- 
codes, processing to the encryption execution unit; and 

selecting output from the ALU OR from the encryption execution unit. 
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28. (Previously Presented) The method of Claim 27, further comprises the step of: 
providing one or more internal registers; 

providing a bus operatively connecting the one or more internal registers to both 
the ALU and the encryption execution unit; 

providing a multiplexer having inputs from both the ALU and the encryption exe- 
cution unit, the multiplexer outputting a selected input. 



29. (Previously Presented) The method of Claim 27 further comprising the step of: 

initializing the encryption TCSM unit in response to a first instruction that defines 
a form of operation to be performed. 
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30. (Previously Presented) The method of Claim 29, wherein the step of initializing 
comprises the steps of: 

decoding a first portion of the first instruction to initialize a DES functional com- 
ponent; and 

decoding a second portion of the first instruction to initialize a sub-key genera- 
tion functional component. 



31 . (Previously Presented) The method of Claim 27, further comprising the steps of: 

executing a second instruction including an encryption opcode that specifies load- 
ing an initial key from a memory into a sub-key generation functional component of the 
TCSM unit. 



32. (Previously Presented) The method of Claim 27, further comprising the steps of: 

performing a DES function in response to execution of a third instruction having a 
field containing an encryption opcode that specifies loading plaintext and initializing a 
DES operation. 
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33. (Previously Presented) A computer readable media, comprising: 

said computer readable media containing instructions for execution in a processor 
for the practice of the method of, 

providing a tightly-coupling hardware data encryption function with software- 
based protocol decode processing within a pipelined processor of a programmable proc- 
essing engine in a network switch; 

providing an encryption execution unit within the pipelined processor; 

providing an ALU within the pipelined processor; 

enabling, by an instruction decode stage (ID stage) in response to reading an op- 
code, the encryption execution unit to read data from a memory shared by the ALU and 
the pipelined processor, and for the encryption execution unit to process the data read 
from the memory; and 

selecting as output the result of processing by the encryption execution unit rather 
than selecting results from the ALU. 

34. (Previously Presented) Electromagnetic signals propagating on a computer network, 
comprising: 

16 



PATENTS 
112025-0112 
680 

said electromagnetic signals carrying instructions for execution on a processor for 
the practice of the method of, 

providing a tightly-coupling hardware data encryption function with soft- 
ware-based protocol decode processing within a pipelined processor of a programmable 
processing engine in a network switch; 

providing an encryption execution unit within the pipelined processor; 

providing an ALU within the pipelined processor; 

enabling, by an instruction decode stage (ID stage) in response to reading 
an opcode, the encryption execution unit to read data from a memory shared by the ALU 
and the pipelined processor, and for the encryption execution unit to process the data read 
from the memory; and 

selecting as output the result of processing by the encryption execution 
unit rather than selecting results from the ALU. 



35. (Previously Presented) A router, comprising: 

a processor having an instruction decode stage (ID stage) for processing opcodes; 
an ALU for performing protocol processing operations; 
a tightly coupled state machine (TCSM) for performing encryption processing; 
a shared memory for providing data to either the ALU or the TCSM; 
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the ID stage, in response to reading an opcode, transferring processing to the 
TCSM, and the TCSM performing encryption processing on data read from the shared 
memory; 

a selector to select as output results from the ALU OR results from the TCSM. 



36. (Previously Presented) The apparatus of Claim 35, further comprising: 
the selector is a multiplexer. 



37. (Previously Presented) The apparatus of Claim 35, further comprising; 

the ALU selects whether the ALU or the TCSM reads data from the memory. 



38. (Previously Presented) The apparatus of Claim 35, further comprising: 

the TCSM performs DES data encryption standard encryption processing. 



39. (Previously Presented) The apparatus of Claim 35, further comprising: 
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a sub-key generation component to provide a key to the TCSM. 



40. (Previously Presented) A method for operating a router, comprising: 

processing opcodes by an instruction decode stage (ID stage); 

performing encryption processing by a tightly coupled state machine (TCSM); 

performing protocol processing by an ALU; 

reading data from a shared memory by either the ALU or the TCSM; 

transferring processing by the ID stage, in response to reading an opcode to the 
TCSM, and the TCSM performing encryption processing on data read from the shared 
memory; 

selecting as output results from the ALU OR results from the TCSM. 



41 . (Previously Presented) The method of Claim 40, further comprising: 

using a multiplexer for selecting as output results from the ALU OR results from 
the TCSM. 
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42. (Previously Presented) The method of Claim 40, further comprising; 

selecting whether the ALU or the TCSM reads data from the memory. 



43. (Previously Presented) The method of Claim 40, further comprising: 

performing DES data encryption standard encryption processing by the TCSM. 



44. (Previously Presented) The method of Claim 40, further comprising: 
providing a key to the TCSM by a sub-key generation component. 



45. (Previously Presented) A router, comprising: 

means for providing a processor having an ALU for processing opcodes and a 
tightly coupled state machine (TCSM) for performing encryption processing; 

means for reading data from a shared memory by either the ALU or the TCSM; 

means for transferring processing by an instruction decode stage (ID stage), in 
response to reading an opcode, to the TCSM, and the TCSM performing encryption proc- 
essing on data read from the shared memory; 
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means for selecting as output results from the ALU OR results from the TCSM. 



46. (Previously Presented) The apparatus of Claim 45, further comprising: 

means for using a multiplexer for selecting as output results from the ALU OR 
results from the TCSM. 



47. (Previously Presented) The apparatus of Claim 45, further comprising; 

means for selecting by the ALU whether the ALU or the TCSM reads data from 
the memory. 

48. (Previously Presented) The apparatus of Claim 45, further comprising: 

means for performing DES data encryption standard encryption processing by the 

TCSM. 



49. (Previously Presented) The apparatus of Claim 45, further comprising: 
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means for providing a key to the TCSM by a sub-key generation component. 



50. (Previously Presented) A computer readable media, comprising: 

said computer readable media containing instructions for execution in a processor 
for the practice of the method of, 

providing encryption functions within a pipelined processor in a network switch, 
having the steps, 

associating a first set of opcodes with an ALU internal to the processor, the ALU 
performing protocol processing operations; 

associating a second set of opcodes with an encryption execution unit internal to 
the processor, the encryption execution unit performing encryption operations; 

decoding opcodes by an instruction decode stage (ID stage); 

transferring by the ID stage, in response to an opcode from the first set of op- 
codes, processing to the ALU; 

transferring by the ID stage, in response to an opcode from said second set of op- 
codes, processing to the encryption execution unit; and 
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selecting output from the ALU OR from the encryption execution unit. 

51. (Previously Presented) Electromagnetic signals propagating on a computer network, 
comprising: 

said electromagnetic signals carrying instructions for execution on a processor for 
the practice of the method of, 

providing encryption functions within a pipelined processor in a network switch, 
having the steps, 

associating a first set of opcodes with an ALU internal to the processor, the ALU 
performing protocol processing operations; 

associating a second set of opcodes with an encryption execution unit internal to 
the processor, the encryption execution unit performing encryption operations; 

decoding opcodes by an instruction decode stage (ID stage); 

transferring by the ID stage, in response to an opcode from the first set of op- 
codes, processing to the ALU; 

transferring by the ID stage, in response to an opcode from said second set of op- 
codes, processing to the encryption execution unit; and 
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selecting output from the ALU OR from the encryption execution unit. 

52. (Previously Presented) A computer readable media, comprising: 

said computer readable media containing instructions for execution in a processor 
for the practice of the method of operating a router, having the steps, 

processing opcodes by an instruction decode stage (ID stage); 
performing encryption processing by a tightly coupled state machine 

(TCSM); 

performing protocol processing by an ALU; 

reading data from a shared memory by either the ALU or the TCSM; 

transferring processing by the ID stage, in response to reading an opcode 
to the TCSM, and the TCSM performing encryption processing on data read from the 
shared memory; and 

electing as output results from the ALU OR results from the TCSM. 

53. (Previously Presented) Electromagnetic signals propagating on a computer network, 
comprising: 

said electromagnetic signals carrying instructions for execution on a processor for 
the practice of the method of operating a router, having the steps, 
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processing opcodes by an instruction decode stage (ID stage); 
performing encryption processing by a tightly coupled state machine 

(TCSM); 

performing protocol processing by an ALU; 

reading data from a shared memory by either the ALU or the TCSM; 

transferring processing by the ID stage, in response to reading an opcode 
to the TCSM, and the TCSM performing encryption processing on data read from the 
shared memory; and 

selecting as output results from the ALU OR results from the TCSM. 
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